authorization resource test